New feature: "Reject Message"

[Brad Beckenhauer]

    [ The following text is in the "windows-1252" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Interesting Feature, 
I thought I'd try to create an EXAMPLE ruleset just for fun.
 
I'm referencing three different files, Comments/suggestions?
<snip>
%rules-dir%/RejectMessage.rules:
# in MailScanner.conf change:
# "Reject Message = no"
# to
# "Reject Message = %rules-dir%/RejectMessage.rules"
#
# Set addresses/domains to be checked as follows:
#
# Directions  Pattern                  Action(s)
From: user at bad.domain.tld       %rules-dir%/RMsg.001 # Reject all w/msg
FROM this user
From: *@bad.domain.tld           %rules-dir%/RMsg.001 # Reject all w/msg
FROM this domain
From: 123.234.                         %rules-dir%/RMsg.002 # Reject all
w/msg FROM this IP
From: /^192\.168\.13[4567]\./   %rules-dir%/RMsg.002 # Reject all w/msg
FROM this IP range
#
# If you have a large number of similiar rules, you can list the address
# pattern in another file and refer to it by putting in the filename
instead
# of the pattern itself.  The file would list one address/domain per
line.
#
# Reject listed domains in file "RejectMessages"
To: %rules-dir%/RejectMessages   %rules-dir%/Rmsg.001
FromOrTo:       default         no  # Default, Do NOT send Reject Message
</snip>
 
<snip>
%rules-dir%/Rmsg.001:
Email from this user/domain has been rejected by MailScanner
</snip>
 
<snip>
%rules-dir%/Rmsg.002:
Email from this IP Address has been rejected by MailScanner
</snip>
 
 
>>> Julian Field<MailScanner at ECS.SOTON.AC.UK> 11/30/2005 8:56:34 AM >>>
-----BEGIN PGP SIGNED MESSAGE-----

When you want to reject messages to or from a particular address, the 
usual answer is "do it in the MTA". The hazard with this is that the 
rejection message sent back to the sender is very brief and very 
technical. Somewhere in it, the message will probably say "550 Access 
denied" or some equally unhelpful message.

So now there is a "Reject Message" setting which you should use with 
a ruleset. When this evaluates to "yes", then the "Rejection Report" 
message is sent back to the sender, and the message is dropped. If 
you want to archive mail that gets this treatment, then use an equal 
ruleset on the "Archive Mail" setting. The "Rejection Report" can 
also be a ruleset, so you can different reports back to different 
places.

This allows you to produce a readable report instead of the unhelpful 
technical garbage produced by most MTAs.
- --
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.3 (Build 2932)

iQEVAwUBQ429pPw32o+k+q+hAQEg+Af/a5ZQ3PwuK0Kh34TkB+lM8djwN6h2E0Wx
seo/+w/XqFSpzFZj/vV3sKeQAaZ+UpYa8kVRFIaB75/SB2yCMs7M6gRCtObwt0pM
QcfdA7YsY5k18E8KAAzrDXca0RM4QIJW2V00/jmLdOJkW7VT08lJr3Q7TMCHswBW
2EGL2b45zBqeXxr/NF9XKpCK8TAEVmLgEz1Uh4uMpiHQrzZvxXxm5dvdulvPaE/k
zsfLuoj8XiNE4JosEnw4lf9sLVCh8hhy08xp5lJuYVy7N/WpD6A2d06dRxN96pL2
Fv+/4kWz93Yf4qA2UIVPqw9PZtXxMq2csMgmkkPkDXQVrrZXtZ9RYA==
=hl16
-----END PGP SIGNATURE-----

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/)
and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!